ID. Date of interview 
date 93/01/20 


ID. Time interview started 
start 44:51:28 


ID.end Completion date of interview 
Date 3/01/20 


ID.end Time interview ended 
12:04:55 


ID. Duration of interview 
time 13.45 


Start of new case 


Q1 


Does the draft guidance cover the relevant issues about the right of access? 
© Yes 
©) No 

©) Unsure / don't know 

If no or unsure/don’t know, what other issues would you like to be covered in it? 


Q2 


Does the draft guidance contain the right level of detail? 
O) Yes 
No 
©) Unsure / don't know 


If no or unsure/don't know, in what areas should there be more detail within the draft 
guidance? 


Page 26 - please provide more information and examples relating to emails. Does an organization need 
to provide copies of all emails or can it refer to the (general) topics that are covered in the emails e.g. 
management human resources. Can an organization limit access to the most recent emails (e.g. the last 
six months) as, in particular for SARs of employees there may be 1,000+ emails that can have the name 
of the employee who filed a SAR, often without any other relevant personal information. Reviewing all 
takes an excessive amount of time. How to protect the privacy interests of the senders/recipients of the 
emails in particular when there are many emails? Redacting sensitive parts of the emails (when the other 
colleagues did not provide consent) can take more time than the one month reply period for a SAR. 

Page 37 - can you provide more explanation and examples about the exemptions that can apply? 


Q3 Does the draft guidance contain enough examples? 
() Yes 
© No 
©.) Unsure / don't know 


If no or unsure/don’t know, please provide any examples that think should be included in 
the draft guidance. 


See my answer above. 


Q4 We have found that data protection professionals often struggle with applying and 
defining ‘manifestly 
unfounded or excessive’ subject access requests. We would like to include a wide 
range of examples 
from a variety of sectors to help you. Please provide some examples of manifestly 
unfounded and excessive 
requests below (if applicable). 


"I want to have a copy of all emails that the company has on me (employee) going 
back five years." 


Q5 Ona scale of 1-5 how useful is the draft guidance? 


1-Notatall 2-—Slightly Moderately 4-—Very 5- Extremely 
useful useful useful useful useful 


© 


Q6 Why have you given this score? 


Structured guidance - accessible language and many examples 


Q7 To what extent do you agree that the draft guidance is clear and easy to understand? 


Strongly Neither agree Strongly 
disagree Disagree nor disagree Agree agree 


© 


Q8 Please provide any further comments or suggestions you may have about the draft 
guidance. 


Q9 Are you answering as: 
O An individual acting in a private capacity (eg someone providing their views as a member of the public) 
©) An individual acting in a professional capacity 
(C) On behalf of an organisation 
(C) Other 
Please specify the name of your organisation: 
TE 


What sector are you from: 
private 


Q10 How did you find out about this survey? 
( ) ICO Twitter account 
(_) ICO Facebook account 
©) ICO LinkedIn account 
©) ICO website 
( ) ICO newsletter 
(_) ICO staff member 
( ) Colleague 
(_) Personal/work Twitter account 
\_) Personal/work Facebook account 
©) Personal/work LinkedIn account 
© Other 
If other please specify: 
Data privacy newsletter 


